@gradial/aci 0.1.53-canary.700 → 0.1.53-canary.702

package/CHANGELOG.md

@@ -16,6 +16,11 @@
 
 ### Migration required
 
+- Error-artifact `prepare` no longer compiles authored content. Sites relying
+  on that side effect must run `content:compile` during local development or
+  explicit content validation. Production Next builds require contracts and
+  code only; authored error-page content is resolved during ACI preview/publish.
+
 - **Block root identity: render the root on every render** (ADR 0051) — each
   registered component must put `aciRootAttrs(props)` (or its rest props) on
   its own root element, and must render that root even when its content is
@@ -66,6 +71,12 @@
 
 ### Changed
 
+- Next production builds and error-artifact preparation are content-independent
+  without `ACI_CODE_ARTIFACT_BUILD`. Local Next development still validates and
+  previews authored error seats; production authored error pages belong to
+  preview/publish. Sites should compile contracts in `prebuild`, validate content
+  explicitly, and remove build-phase switches from their scripts.
+
 - **`rootIdentity` reads every registry file again.** The `registry` option
   introduced in 0.1.52-rc.33 is still accepted, but it is no longer required:
   the check covers every file that calls `createRegistry(` (a main registry

package/README.md

@@ -1,6 +1,6 @@
 # Agentic Content Infrastructure SDK
 
-`@gradial/aci` `0.1.53-canary.700` is a pre-1.0 public-surface reset for the ACI
+`@gradial/aci` `0.1.53-canary.702` is a pre-1.0 public-surface reset for the ACI
 client SDK. Breaking changes from the old `0.1.x` accidental surface are
 intentional: the root import is framework-neutral, framework runtime behavior is
 behind explicit subpaths, and the first required customer path is React/Next.
@@ -8,7 +8,7 @@ behind explicit subpaths, and the first required customer path is React/Next.
 ## Install
 
 ```bash
-npm install @gradial/aci@0.1.53-canary.700 zod@^4
+npm install @gradial/aci@0.1.53-canary.702 zod@^4
 ```
 
 ## Root Import
@@ -137,13 +137,13 @@ host bundles select and serve immutable release artifacts.
 The first RC scaffold path is Next:
 
 ```bash
-npx @gradial/aci@0.1.53-canary.700 init my-site --template next-starter
+npx @gradial/aci@0.1.53-canary.702 init my-site --template next-starter
 ```
 
 List available templates:
 
 ```bash
-npx @gradial/aci@0.1.53-canary.700 init --list
+npx @gradial/aci@0.1.53-canary.702 init --list
 ```
 
 ## Personalization: The One-Tag Install

package/dist/cli/emit-error-pages.d.mts

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-export function prepareCodeArtifact(root: string | undefined, content: any): Promise<string>;
+export function prepare(root: string | undefined, content: any): Promise<string>;
 /**
  * D-15 policy resolution for the 500.html instrumentation tag (page_type
  * "error"; self-contained inline delivery — this copy is a real static
@@ -38,3 +38,4 @@ export function writeInstrumentationArtifact(root: string | undefined, content:
  * loudly instead.
  */
 export function stampInstrumentation(html: any, instrumentationTag: any): any;
+export function emit(root: string | undefined, content: any): Promise<void>;

package/dist/cli/emit-error-pages.mjs

@@ -1,80 +1,19 @@
 #!/usr/bin/env node
-// Authorable error pages — build integration (spec:
-// specs/features/authorable-error-pages, T3/T11; REQ-10/REQ-11/REQ-14, D-9,
-// D-16).
-//
-// ACI_CODE_ARTIFACT_BUILD=1 makes both phases content-independent: prepare
-// serializes only the code-owned policy at its existing .aci/compiled path.
-// Emit uses the shipped default without resolving authored error-page bindings.
-//
-// Two phases. The Next template wires both around `next build`; the Astro
-// template runs only `prepare` before `astro build` (its 404/500 seats
-// render through the framework, but the D-16 instrumentation artifact must
-// still reach the compiled content root for the AWS lane):
-//
-//   prepare  (before `next build`)
-//     Ensures compiled content exists at .aci/compiled so withAci() can
-//     serialize the bound catchAll page for the client-only error seat
-//     (D-9). Compiles ./.content via the platform CLI when needed; when
-//     neither compiled content nor authored content exists, it warns and
-//     leaves the shipped default in play (REQ-4, warn posture). Then writes
-//     error-pages/instrumentation.json (both kinds' serialized tags) into
-//     the compiled content root so the tag crosses the JS→Go boundary as
-//     data: builders retain the instrumentation file at its existing capsule
-//     path, and the Go publish materializer stamps the kind-matching tag into the CDN
-//     error artifacts (D-16). An unserializable tenant push fails the build
-//     loudly here (delta FIND-006).
-//
-//   emit     (after `next build`)
-//     Materializes `public/500.html` from the page bound to
-//     site.json#errorPages.catchAll by booting the standalone build,
-//     fetching the bound route, and post-processing the document. Boot-and-
-//     fetch beats re-rendering the page here because the standalone server
-//     is the only renderer that produces the document exactly as served
-//     (layout shell, resolved fragments, RSC-injected head and styles).
-//     Post-processing:
-//       - all script tags and preload/prefetch links stripped — this
-//         removes the collect and assignment tags (REQ-11) along with the
-//         framework runtime, which is useless in a statically served copy;
-//       - same-origin stylesheets inlined from .next/static (REQ-14 spirit:
-//         inline styles; note @font-face/image URLs inside the CSS keep
-//         their same-origin paths — this copy is served by the Vercel
-//         platform on the deployment that owns those assets);
-//       - one self-contained inline script appended pushing the D-14
-//         `page_view` (page_type "error") — a static document executes
-//         inline scripts, unlike the flight-rendered not-found seat. The
-//         push body is site policy (D-15): the tenant-owned
-//         src/aci/error-page-instrumentation.mjs when present, the SDK
-//         default otherwise;
-//       - hard size budget: ≤150 KB raw (REQ-14) — exceeding it fails the
-//         build; trimming the design system or falling back to system
-//         fonts is the sanctioned escape hatch.
-//     Skips when the site already provides its own public/500.html (a file
-//     without the generation marker); regenerates its own prior output.
-//     Absent bindings emit the shipped branded-neutral default (REQ-4).
-//     Vercel picks static per-status files out of the build output
-//     ("file presence = configuration"); on the current Pro plan the file
-//     serves app-level 500s only and lights up for platform 5xx on a plan
-//     upgrade (REQ-10, P-1).
-//
-// Usage: node ./node_modules/@gradial/aci/src/cli/emit-error-pages.mjs <prepare|emit>
-import { execFileSync, spawn } from 'node:child_process';
+// Code-build error artifacts. prepare transports code-owned analytics policy;
+// emit writes a content-independent static 500. Authored error-page bindings
+// and rendering belong to content preview/publish, never the framework build.
+// Usage: emit-error-pages.mjs <prepare|emit>
 import fs from 'node:fs';
-import net from 'node:net';
 import path from 'node:path';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 const MARKER = '<!-- aci:error-pages generated -->';
 const SIZE_BUDGET = 150 * 1024;
-const BOOT_DEADLINE_MS = 60_000;
 const packageRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..', '..');
 const siteRoot = process.cwd();
 const contentRoot = path.resolve(siteRoot, process.env.ACI_CONTENT_ROOT || '.aci/compiled');
 function log(message) {
     console.log(`[aci error-pages] ${message}`);
 }
-function warn(message) {
-    console.warn(`\n[aci error-pages] WARNING: ${message}\n`);
-}
 function fail(message) {
     console.error(`\n[aci error-pages] ERROR: ${message}\n`);
     process.exit(1);
@@ -82,175 +21,11 @@ function fail(message) {
 async function sdkContent() {
     return await import(pathToFileURL(path.join(packageRoot, 'dist', 'content', 'index.js')).href);
 }
-function hasCompiledContent() {
-    return fs.existsSync(path.join(contentRoot, 'manifest.json'));
-}
-// ---------------------------------------------------------------------------
-// prepare
-// ---------------------------------------------------------------------------
-// Retain the deployed transport path for SDK-first upgrades. This file is
-// executable policy, not a compiled page snapshot; do not compile content here.
-export async function prepareCodeArtifact(root = siteRoot, content) {
+// Keep the existing capsule transport path for SDK-first upgrades. This file
+// is executable policy, not a compiled content snapshot.
+export async function prepare(root = siteRoot, content) {
     return writeInstrumentationArtifact(root, content, path.join(root, '.aci', 'compiled'));
 }
-async function prepare() {
-    if (process.env.ACI_CODE_ARTIFACT_BUILD === '1') {
-        // Code artifacts carry executable policy only. The selected content and
-        // its error-page bindings belong to preview/publish, never this build.
-        await prepareCodeArtifact();
-        return;
-    }
-    if (hasCompiledContent()) {
-        log(`compiled content present at ${contentRoot}`);
-    }
-    else {
-        const authored = path.join(siteRoot, '.content');
-        if (!fs.existsSync(authored)) {
-            warn(`neither compiled content (${contentRoot}) nor authored content (./.content) exists; `
-                + 'the error seat and 500.html will serve the shipped default page (REQ-4)');
-        }
-        else {
-            log('compiling ./.content for the error-page build steps');
-            execFileSync('node', [path.join(packageRoot, 'bin', 'aci.js'), 'content', 'compile', '--content', authored, '--out', contentRoot], { cwd: siteRoot, stdio: 'inherit' });
-        }
-    }
-    // D-16: the instrumentation artifact rides the compiled content root into
-    // the AWS-lane code capsule (source/.aci/compiled/**). Written even when
-    // content is absent — the tenant policy module is independent of authored
-    // content, and an artifact the Go materializer never receives silently
-    // degrades to the default tags (the exact gap D-16 closes).
-    try {
-        await writeInstrumentationArtifact();
-    }
-    catch (error) {
-        fail(error.message);
-    }
-}
-// ---------------------------------------------------------------------------
-// emit
-// ---------------------------------------------------------------------------
-async function resolveCatchAllRoute() {
-    const { resolveErrorPageBindings, defaultErrorPageHtml, errorPagePostureFromEnv } = await sdkContent();
-    // D-5 posture: the one shared config surface (ACI_ERROR_PAGES_POSTURE);
-    // unknown values fail closed here just like the Go stack.
-    let posture;
-    try {
-        posture = errorPagePostureFromEnv();
-    }
-    catch (error) {
-        fail(error.message);
-    }
-    if (!hasCompiledContent()) {
-        if (posture === 'enforce') {
-            fail(`no compiled content at ${contentRoot}; the enforce posture fails closed (D-5)`);
-        }
-        warn(`no compiled content at ${contentRoot}; emitting the shipped default 500.html (REQ-4)`);
-        return { route: null, defaultHtml: defaultErrorPageHtml() };
-    }
-    const { FileContentProvider } = await import(pathToFileURL(path.join(packageRoot, 'dist', 'providers', 'file.js')).href);
-    const provider = new FileContentProvider(contentRoot);
-    const siteConfig = await provider.getSiteConfig();
-    const resolution = await resolveErrorPageBindings(siteConfig, { source: provider, posture });
-    if (resolution.errors.length > 0) {
-        fail(`errorPages bindings are invalid (REQ-5, fail closed):\n- ${resolution.errors.join('\n- ')}`);
-    }
-    for (const warning of resolution.warnings)
-        warn(warning);
-    if (resolution.defaulted || !resolution.bindings) {
-        return { route: null, defaultHtml: defaultErrorPageHtml() };
-    }
-    return { route: resolution.bindings.catchAll, defaultHtml: defaultErrorPageHtml() };
-}
-async function freePort() {
-    return new Promise((resolve, reject) => {
-        const server = net.createServer();
-        server.unref();
-        server.on('error', reject);
-        server.listen(0, '127.0.0.1', () => {
-            const { port } = server.address();
-            server.close(() => resolve(port));
-        });
-    });
-}
-async function fetchRenderedRoute(route) {
-    const serverPath = path.join(siteRoot, '.next', 'standalone', 'server.js');
-    if (!fs.existsSync(serverPath)) {
-        fail(`${serverPath} missing — the emit phase must run after \`next build\` (withAci uses standalone output)`);
-    }
-    const port = await freePort();
-    const logChunks = [];
-    const child = spawn('node', [serverPath], {
-        cwd: siteRoot,
-        detached: true,
-        stdio: ['ignore', 'pipe', 'pipe'],
-        env: {
-            ...process.env,
-            NODE_ENV: 'production',
-            PORT: String(port),
-            HOSTNAME: '127.0.0.1',
-            ACI_CONTENT_PROVIDER: 'file',
-            ACI_CONTENT_ROOT: contentRoot,
-        },
-    });
-    child.stdout.on('data', (c) => logChunks.push(String(c)));
-    child.stderr.on('data', (c) => logChunks.push(String(c)));
-    const exited = new Promise((resolve) => {
-        child.on('exit', resolve);
-        child.on('error', (error) => {
-            logChunks.push(`spawn failed: ${error.message}\n`);
-            resolve(null);
-        });
-    });
-    try {
-        const url = `http://127.0.0.1:${port}${route}`;
-        const start = Date.now();
-        let last = 'no attempt made';
-        while (Date.now() - start < BOOT_DEADLINE_MS) {
-            try {
-                const response = await fetch(url, { redirect: 'follow' });
-                if (response.status === 200)
-                    return await response.text();
-                last = `status ${response.status}`;
-            }
-            catch (error) {
-                last = error.message;
-            }
-            await new Promise((r) => setTimeout(r, 500));
-        }
-        fail(`GET ${url} did not render within ${BOOT_DEADLINE_MS}ms (last: ${last})\n--- server output ---\n${logChunks.join('').slice(-4000)}`);
-        return '';
-    }
-    finally {
-        const killGroup = (signal) => {
-            if (!child.pid)
-                return;
-            try {
-                process.kill(-child.pid, signal);
-            }
-            catch { /* gone */ }
-        };
-        killGroup('SIGTERM');
-        const killTimer = setTimeout(() => killGroup('SIGKILL'), 10_000);
-        await exited;
-        clearTimeout(killTimer);
-        killGroup('SIGKILL');
-    }
-}
-function inlineStylesheets(html) {
-    return html.replace(/<link\b[^>]*rel="stylesheet"[^>]*>/gi, (tag) => {
-        const href = tag.match(/href="([^"]+)"/i)?.[1];
-        if (!href || !href.startsWith('/_next/')) {
-            warn(`dropping non-inlinable stylesheet ${href ?? '<unknown>'} from 500.html (self-containment, REQ-14)`);
-            return '';
-        }
-        const cssPath = path.join(siteRoot, '.next', href.replace(/^\/_next\//, ''));
-        if (!fs.existsSync(cssPath)) {
-            warn(`stylesheet ${href} not found in .next output; dropping it from 500.html`);
-            return '';
-        }
-        return `<style>${fs.readFileSync(cssPath, 'utf8')}</style>`;
-    });
-}
 // Relative convention path of the tenant-owned instrumentation policy
 // module (D-15, code-organization R-14).
 const INSTRUMENTATION_MODULE = path.join('src', 'aci', 'error-page-instrumentation.mjs');
@@ -351,48 +126,16 @@ export function stampInstrumentation(html, instrumentationTag) {
     }
     return stamped;
 }
-function postProcess(html, instrumentationTag) {
-    let out = html;
-    // Strip every script tag: framework runtime chunks are dead weight in a
-    // statically served copy, and this removes the collect script and the
-    // data-aci-assignments tag (REQ-11) in one sweep.
-    out = out.replace(/<script\b[\s\S]*?<\/script>/gi, '');
-    out = out.replace(/<link\b[^>]*rel="(?:preload|modulepreload|prefetch)"[^>]*>/gi, '');
-    out = inlineStylesheets(out);
-    return stampInstrumentation(out, instrumentationTag);
-}
-async function emit() {
-    const publicDir = path.join(siteRoot, 'public');
+export async function emit(root = siteRoot, content) {
+    const publicDir = path.join(root, 'public');
     const target = path.join(publicDir, '500.html');
     if (fs.existsSync(target) && !fs.readFileSync(target, 'utf8').includes(MARKER)) {
         log('public/500.html already provided by the site; leaving it untouched (skip-if-present)');
         return;
     }
-    const { route, defaultHtml } = process.env.ACI_CODE_ARTIFACT_BUILD === '1'
-        ? { route: null, defaultHtml: (await sdkContent()).defaultErrorPageHtml() }
-        : await resolveCatchAllRoute();
-    let instrumentationTag;
-    try {
-        instrumentationTag = await resolveInstrumentationTag();
-    }
-    catch (error) {
-        fail(error.message);
-    }
-    let html;
-    try {
-        if (!route) {
-            // The shipped default is already self-contained; it gets the same
-            // instrumentation-plus-marker append used for rendered pages.
-            html = stampInstrumentation(defaultHtml, instrumentationTag);
-        }
-        else {
-            log(`rendering bound catchAll page ${route} for public/500.html`);
-            html = postProcess(await fetchRenderedRoute(route), instrumentationTag);
-        }
-    }
-    catch (error) {
-        fail(error.message);
-    }
+    const sdk = content ?? (await sdkContent());
+    const instrumentationTag = await resolveInstrumentationTag(root, sdk);
+    const html = stampInstrumentation(sdk.defaultErrorPageHtml(), instrumentationTag);
     const size = Buffer.byteLength(html);
     if (size > SIZE_BUDGET) {
         fail(`public/500.html is ${size} bytes, over the ${SIZE_BUDGET}-byte budget (REQ-14). `
@@ -400,7 +143,7 @@ async function emit() {
     }
     fs.mkdirSync(publicDir, { recursive: true });
     fs.writeFileSync(target, html);
-    log(`wrote public/500.html (${size} bytes${route ? `, from ${route}` : ', shipped default'})`);
+    log(`wrote public/500.html (${size} bytes, shipped default)`);
 }
 // Run only when executed as a CLI — the module is also imported by unit
 // tests for stampInstrumentation.

package/dist/next/config.js

@@ -13,19 +13,12 @@ export function withAci(nextConfig = {}, options = {}) {
             '`next dev` / `next build` without --turbopack.');
     }
     const publicPaths = collectPublicPaths(join(process.cwd(), 'public'));
-    // Authorable error pages (D-9): the Next error seat is client-only, so the
-    // bound catchAll page's content is serialized here — while next.config is
-    // evaluated — and injected into the bundle via DefinePlugin below. The D-5
-    // posture rides ACI_ERROR_PAGES_POSTURE (the same variable the Go stack
-    // reads): under warn (default), absent bindings/content and non-REQ-5
-    // serialization failures warn and serialize the shipped default (REQ-4);
-    // under enforce they fail the build closed, and unknown posture values
-    // fail closed too. Present-but-broken bindings fail closed always (REQ-5).
-    // A code artifact is independent of every content snapshot. Authored error
-    // bindings are validated when previewing/publishing the selected content.
-    const errorSeat = process.env.ACI_CODE_ARTIFACT_BUILD === '1'
-        ? { payload: { defaulted: true, defaultHtml: defaultErrorPageFragmentHtml() }, warnings: [], errors: [] }
-        : buildErrorSeatPayload(undefined, process.env.ACI_ERROR_PAGES_POSTURE);
+    // Local dev previews the authored error seat. Production code builds must
+    // never bake a content snapshot into the native client-only error seat;
+    // the selected release's authored errors are materialized at publish.
+    const errorSeat = process.env.NODE_ENV === 'development'
+        ? buildErrorSeatPayload(undefined, process.env.ACI_ERROR_PAGES_POSTURE)
+        : { payload: { defaulted: true, defaultHtml: defaultErrorPageFragmentHtml() }, warnings: [], errors: [] };
     if (errorSeat.errors.length > 0) {
         throw new Error(`ACI errorPages bindings are invalid (site.json#errorPages):\n- ${errorSeat.errors.join('\n- ')}`);
     }

package/dist/next/error-seat-payload.d.ts

@@ -1,6 +1,6 @@
 import type { ErrorSeatPayload } from './error-seat.js';
 /**
- * Build-time serialization of the bound catchAll page for the client-only
+ * Local-development serialization of the bound catchAll page for the client-only
  * Next error seat (authorable-error-pages D-9). Synchronous by design: it
  * runs inside withAci() while next.config is evaluated, reading the compiled
  * content tree directly (the async providers cannot be awaited there).

package/dist/next/error-seat-payload.js

@@ -29,8 +29,7 @@ export function buildErrorSeatPayload(contentRoot, posture) {
     const root = path.resolve(process.cwd(), contentRoot || process.env.ACI_CONTENT_ROOT || '.aci/compiled');
     if (!existsSync(path.join(root, 'manifest.json'))) {
         const message = `no compiled content at ${root}; the error seat will serve the shipped default page — `
-            + 'run the content compile before `next build` (the template build script\'s '
-            + '`emit-error-pages.mjs prepare` phase does this)';
+            + 'run `npm run content:compile` to preview authored error pages locally';
         if (effectivePosture === 'enforce') {
             errors.push(`${message} (posture "enforce" fails closed, D-5)`);
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gradial/aci",
-  "version": "0.1.53-canary.700",
+  "version": "0.1.53-canary.702",
   "repository": {
     "type": "git",
     "url": "https://github.com/gradial/bare-metal-go.git",
@@ -164,11 +164,11 @@
     "astro": "^6.4.8"
   },
   "optionalDependencies": {
-    "@gradial/aci-cli-darwin-arm64": "0.1.53-canary.700",
-    "@gradial/aci-cli-darwin-x64": "0.1.53-canary.700",
-    "@gradial/aci-cli-linux-arm64": "0.1.53-canary.700",
-    "@gradial/aci-cli-linux-x64": "0.1.53-canary.700",
-    "@gradial/aci-cli-win32-arm64": "0.1.53-canary.700",
-    "@gradial/aci-cli-win32-x64": "0.1.53-canary.700"
+    "@gradial/aci-cli-darwin-arm64": "0.1.53-canary.702",
+    "@gradial/aci-cli-darwin-x64": "0.1.53-canary.702",
+    "@gradial/aci-cli-linux-arm64": "0.1.53-canary.702",
+    "@gradial/aci-cli-linux-x64": "0.1.53-canary.702",
+    "@gradial/aci-cli-win32-arm64": "0.1.53-canary.702",
+    "@gradial/aci-cli-win32-x64": "0.1.53-canary.702"
   }
 }

package/src/cli/emit-error-pages.mjs

@@ -1,73 +1,15 @@
 #!/usr/bin/env node
-// Authorable error pages — build integration (spec:
-// specs/features/authorable-error-pages, T3/T11; REQ-10/REQ-11/REQ-14, D-9,
-// D-16).
-//
-// ACI_CODE_ARTIFACT_BUILD=1 makes both phases content-independent: prepare
-// serializes only the code-owned policy at its existing .aci/compiled path.
-// Emit uses the shipped default without resolving authored error-page bindings.
-//
-// Two phases. The Next template wires both around `next build`; the Astro
-// template runs only `prepare` before `astro build` (its 404/500 seats
-// render through the framework, but the D-16 instrumentation artifact must
-// still reach the compiled content root for the AWS lane):
-//
-//   prepare  (before `next build`)
-//     Ensures compiled content exists at .aci/compiled so withAci() can
-//     serialize the bound catchAll page for the client-only error seat
-//     (D-9). Compiles ./.content via the platform CLI when needed; when
-//     neither compiled content nor authored content exists, it warns and
-//     leaves the shipped default in play (REQ-4, warn posture). Then writes
-//     error-pages/instrumentation.json (both kinds' serialized tags) into
-//     the compiled content root so the tag crosses the JS→Go boundary as
-//     data: builders retain the instrumentation file at its existing capsule
-//     path, and the Go publish materializer stamps the kind-matching tag into the CDN
-//     error artifacts (D-16). An unserializable tenant push fails the build
-//     loudly here (delta FIND-006).
-//
-//   emit     (after `next build`)
-//     Materializes `public/500.html` from the page bound to
-//     site.json#errorPages.catchAll by booting the standalone build,
-//     fetching the bound route, and post-processing the document. Boot-and-
-//     fetch beats re-rendering the page here because the standalone server
-//     is the only renderer that produces the document exactly as served
-//     (layout shell, resolved fragments, RSC-injected head and styles).
-//     Post-processing:
-//       - all script tags and preload/prefetch links stripped — this
-//         removes the collect and assignment tags (REQ-11) along with the
-//         framework runtime, which is useless in a statically served copy;
-//       - same-origin stylesheets inlined from .next/static (REQ-14 spirit:
-//         inline styles; note @font-face/image URLs inside the CSS keep
-//         their same-origin paths — this copy is served by the Vercel
-//         platform on the deployment that owns those assets);
-//       - one self-contained inline script appended pushing the D-14
-//         `page_view` (page_type "error") — a static document executes
-//         inline scripts, unlike the flight-rendered not-found seat. The
-//         push body is site policy (D-15): the tenant-owned
-//         src/aci/error-page-instrumentation.mjs when present, the SDK
-//         default otherwise;
-//       - hard size budget: ≤150 KB raw (REQ-14) — exceeding it fails the
-//         build; trimming the design system or falling back to system
-//         fonts is the sanctioned escape hatch.
-//     Skips when the site already provides its own public/500.html (a file
-//     without the generation marker); regenerates its own prior output.
-//     Absent bindings emit the shipped branded-neutral default (REQ-4).
-//     Vercel picks static per-status files out of the build output
-//     ("file presence = configuration"); on the current Pro plan the file
-//     serves app-level 500s only and lights up for platform 5xx on a plan
-//     upgrade (REQ-10, P-1).
-//
-// Usage: node ./node_modules/@gradial/aci/src/cli/emit-error-pages.mjs <prepare|emit>
+// Code-build error artifacts. prepare transports code-owned analytics policy;
+// emit writes a content-independent static 500. Authored error-page bindings
+// and rendering belong to content preview/publish, never the framework build.
+// Usage: emit-error-pages.mjs <prepare|emit>
 
-import { execFileSync, spawn } from 'node:child_process';
 import fs from 'node:fs';
-import net from 'node:net';
 import path from 'node:path';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 
 const MARKER = '<!-- aci:error-pages generated -->';
 const SIZE_BUDGET = 150 * 1024;
-const BOOT_DEADLINE_MS = 60_000;
 
 const packageRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..', '..');
 const siteRoot = process.cwd();
@@ -76,9 +18,6 @@ const contentRoot = path.resolve(siteRoot, process.env.ACI_CONTENT_ROOT || '.aci
 function log(message) {
   console.log(`[aci error-pages] ${message}`);
 }
-function warn(message) {
-  console.warn(`\n[aci error-pages] WARNING: ${message}\n`);
-}
 function fail(message) {
   console.error(`\n[aci error-pages] ERROR: ${message}\n`);
   process.exit(1);
@@ -88,181 +27,12 @@ async function sdkContent() {
   return await import(pathToFileURL(path.join(packageRoot, 'dist', 'content', 'index.js')).href);
 }
 
-function hasCompiledContent() {
-  return fs.existsSync(path.join(contentRoot, 'manifest.json'));
-}
-
-// ---------------------------------------------------------------------------
-// prepare
-// ---------------------------------------------------------------------------
-
-// Retain the deployed transport path for SDK-first upgrades. This file is
-// executable policy, not a compiled page snapshot; do not compile content here.
-export async function prepareCodeArtifact(root = siteRoot, content) {
+// Keep the existing capsule transport path for SDK-first upgrades. This file
+// is executable policy, not a compiled content snapshot.
+export async function prepare(root = siteRoot, content) {
   return writeInstrumentationArtifact(root, content, path.join(root, '.aci', 'compiled'));
 }
 
-async function prepare() {
-  if (process.env.ACI_CODE_ARTIFACT_BUILD === '1') {
-    // Code artifacts carry executable policy only. The selected content and
-    // its error-page bindings belong to preview/publish, never this build.
-    await prepareCodeArtifact();
-    return;
-  }
-  if (hasCompiledContent()) {
-    log(`compiled content present at ${contentRoot}`);
-  } else {
-    const authored = path.join(siteRoot, '.content');
-    if (!fs.existsSync(authored)) {
-      warn(
-        `neither compiled content (${contentRoot}) nor authored content (./.content) exists; `
-        + 'the error seat and 500.html will serve the shipped default page (REQ-4)',
-      );
-    } else {
-      log('compiling ./.content for the error-page build steps');
-      execFileSync(
-        'node',
-        [path.join(packageRoot, 'bin', 'aci.js'), 'content', 'compile', '--content', authored, '--out', contentRoot],
-        { cwd: siteRoot, stdio: 'inherit' },
-      );
-    }
-  }
-  // D-16: the instrumentation artifact rides the compiled content root into
-  // the AWS-lane code capsule (source/.aci/compiled/**). Written even when
-  // content is absent — the tenant policy module is independent of authored
-  // content, and an artifact the Go materializer never receives silently
-  // degrades to the default tags (the exact gap D-16 closes).
-  try {
-    await writeInstrumentationArtifact();
-  } catch (error) {
-    fail(error.message);
-  }
-}
-
-// ---------------------------------------------------------------------------
-// emit
-// ---------------------------------------------------------------------------
-
-async function resolveCatchAllRoute() {
-  const { resolveErrorPageBindings, defaultErrorPageHtml, errorPagePostureFromEnv } = await sdkContent();
-  // D-5 posture: the one shared config surface (ACI_ERROR_PAGES_POSTURE);
-  // unknown values fail closed here just like the Go stack.
-  let posture;
-  try {
-    posture = errorPagePostureFromEnv();
-  } catch (error) {
-    fail(error.message);
-  }
-  if (!hasCompiledContent()) {
-    if (posture === 'enforce') {
-      fail(`no compiled content at ${contentRoot}; the enforce posture fails closed (D-5)`);
-    }
-    warn(`no compiled content at ${contentRoot}; emitting the shipped default 500.html (REQ-4)`);
-    return { route: null, defaultHtml: defaultErrorPageHtml() };
-  }
-  const { FileContentProvider } = await import(
-    pathToFileURL(path.join(packageRoot, 'dist', 'providers', 'file.js')).href
-  );
-  const provider = new FileContentProvider(contentRoot);
-  const siteConfig = await provider.getSiteConfig();
-  const resolution = await resolveErrorPageBindings(siteConfig, { source: provider, posture });
-  if (resolution.errors.length > 0) {
-    fail(`errorPages bindings are invalid (REQ-5, fail closed):\n- ${resolution.errors.join('\n- ')}`);
-  }
-  for (const warning of resolution.warnings) warn(warning);
-  if (resolution.defaulted || !resolution.bindings) {
-    return { route: null, defaultHtml: defaultErrorPageHtml() };
-  }
-  return { route: resolution.bindings.catchAll, defaultHtml: defaultErrorPageHtml() };
-}
-
-async function freePort() {
-  return new Promise((resolve, reject) => {
-    const server = net.createServer();
-    server.unref();
-    server.on('error', reject);
-    server.listen(0, '127.0.0.1', () => {
-      const { port } = server.address();
-      server.close(() => resolve(port));
-    });
-  });
-}
-
-async function fetchRenderedRoute(route) {
-  const serverPath = path.join(siteRoot, '.next', 'standalone', 'server.js');
-  if (!fs.existsSync(serverPath)) {
-    fail(`${serverPath} missing — the emit phase must run after \`next build\` (withAci uses standalone output)`);
-  }
-  const port = await freePort();
-  const logChunks = [];
-  const child = spawn('node', [serverPath], {
-    cwd: siteRoot,
-    detached: true,
-    stdio: ['ignore', 'pipe', 'pipe'],
-    env: {
-      ...process.env,
-      NODE_ENV: 'production',
-      PORT: String(port),
-      HOSTNAME: '127.0.0.1',
-      ACI_CONTENT_PROVIDER: 'file',
-      ACI_CONTENT_ROOT: contentRoot,
-    },
-  });
-  child.stdout.on('data', (c) => logChunks.push(String(c)));
-  child.stderr.on('data', (c) => logChunks.push(String(c)));
-  const exited = new Promise((resolve) => {
-    child.on('exit', resolve);
-    child.on('error', (error) => {
-      logChunks.push(`spawn failed: ${error.message}\n`);
-      resolve(null);
-    });
-  });
-
-  try {
-    const url = `http://127.0.0.1:${port}${route}`;
-    const start = Date.now();
-    let last = 'no attempt made';
-    while (Date.now() - start < BOOT_DEADLINE_MS) {
-      try {
-        const response = await fetch(url, { redirect: 'follow' });
-        if (response.status === 200) return await response.text();
-        last = `status ${response.status}`;
-      } catch (error) {
-        last = error.message;
-      }
-      await new Promise((r) => setTimeout(r, 500));
-    }
-    fail(`GET ${url} did not render within ${BOOT_DEADLINE_MS}ms (last: ${last})\n--- server output ---\n${logChunks.join('').slice(-4000)}`);
-    return '';
-  } finally {
-    const killGroup = (signal) => {
-      if (!child.pid) return;
-      try { process.kill(-child.pid, signal); } catch { /* gone */ }
-    };
-    killGroup('SIGTERM');
-    const killTimer = setTimeout(() => killGroup('SIGKILL'), 10_000);
-    await exited;
-    clearTimeout(killTimer);
-    killGroup('SIGKILL');
-  }
-}
-
-function inlineStylesheets(html) {
-  return html.replace(/<link\b[^>]*rel="stylesheet"[^>]*>/gi, (tag) => {
-    const href = tag.match(/href="([^"]+)"/i)?.[1];
-    if (!href || !href.startsWith('/_next/')) {
-      warn(`dropping non-inlinable stylesheet ${href ?? '<unknown>'} from 500.html (self-containment, REQ-14)`);
-      return '';
-    }
-    const cssPath = path.join(siteRoot, '.next', href.replace(/^\/_next\//, ''));
-    if (!fs.existsSync(cssPath)) {
-      warn(`stylesheet ${href} not found in .next output; dropping it from 500.html`);
-      return '';
-    }
-    return `<style>${fs.readFileSync(cssPath, 'utf8')}</style>`;
-  });
-}
-
 // Relative convention path of the tenant-owned instrumentation policy
 // module (D-15, code-organization R-14).
 const INSTRUMENTATION_MODULE = path.join('src', 'aci', 'error-page-instrumentation.mjs');
@@ -372,47 +142,17 @@ export function stampInstrumentation(html, instrumentationTag) {
   return stamped;
 }
 
-function postProcess(html, instrumentationTag) {
-  let out = html;
-  // Strip every script tag: framework runtime chunks are dead weight in a
-  // statically served copy, and this removes the collect script and the
-  // data-aci-assignments tag (REQ-11) in one sweep.
-  out = out.replace(/<script\b[\s\S]*?<\/script>/gi, '');
-  out = out.replace(/<link\b[^>]*rel="(?:preload|modulepreload|prefetch)"[^>]*>/gi, '');
-  out = inlineStylesheets(out);
-  return stampInstrumentation(out, instrumentationTag);
-}
-
-async function emit() {
-  const publicDir = path.join(siteRoot, 'public');
+export async function emit(root = siteRoot, content) {
+  const publicDir = path.join(root, 'public');
   const target = path.join(publicDir, '500.html');
   if (fs.existsSync(target) && !fs.readFileSync(target, 'utf8').includes(MARKER)) {
     log('public/500.html already provided by the site; leaving it untouched (skip-if-present)');
     return;
   }
 
-  const { route, defaultHtml } = process.env.ACI_CODE_ARTIFACT_BUILD === '1'
-    ? { route: null, defaultHtml: (await sdkContent()).defaultErrorPageHtml() }
-    : await resolveCatchAllRoute();
-  let instrumentationTag;
-  try {
-    instrumentationTag = await resolveInstrumentationTag();
-  } catch (error) {
-    fail(error.message);
-  }
-  let html;
-  try {
-    if (!route) {
-      // The shipped default is already self-contained; it gets the same
-      // instrumentation-plus-marker append used for rendered pages.
-      html = stampInstrumentation(defaultHtml, instrumentationTag);
-    } else {
-      log(`rendering bound catchAll page ${route} for public/500.html`);
-      html = postProcess(await fetchRenderedRoute(route), instrumentationTag);
-    }
-  } catch (error) {
-    fail(error.message);
-  }
+  const sdk = content ?? (await sdkContent());
+  const instrumentationTag = await resolveInstrumentationTag(root, sdk);
+  const html = stampInstrumentation(sdk.defaultErrorPageHtml(), instrumentationTag);
 
   const size = Buffer.byteLength(html);
   if (size > SIZE_BUDGET) {
@@ -424,7 +164,7 @@ async function emit() {
 
   fs.mkdirSync(publicDir, { recursive: true });
   fs.writeFileSync(target, html);
-  log(`wrote public/500.html (${size} bytes${route ? `, from ${route}` : ', shipped default'})`);
+  log(`wrote public/500.html (${size} bytes, shipped default)`);
 }
 
 // Run only when executed as a CLI — the module is also imported by unit